Deployment Scenarios Using VLANs
This deployment is similar to the security deployments using the PIX 501. If you
Note
already have a security deployment with PIX 501 security appliances in which
devices behind the firewall can communicate internally and externally, you can
keep the same deployment and replace the PIX 501 devices with ASA 5505
devices.
If this same customer needed to have two Internet connections, the Outside VLAN
could be allocated an additional port, as shown in Figure 3-2. This deployment
includes an Inside VLAN and an Outside VLAN with two external connections to
provide link redundancy if one fails.
Figure 3-2
computer
Even very complex networks can be deployed with only two VLANs, one for
inside and one for outside.
ASA 5505 Getting Started Guide
3-6
Inside VLAN with Dual ISP Connectivity
Inside VLAN
Server
Laptop
Printer
Personal
computer
Chapter 3
IP Phone
Power
cable
PO
WE
Cis
48
R
co
VD
C
AS
A SS
C-0
5
7
POW
ER
ove
r ETH
ERN
ET
6
Router
Planning a VLAN Configuration
ASA 5505
Sta
tus
Sec
uri
ty
Ser
vic
es
Ca
rd
5
Slo
t
4
3
2
co ns
ole
1
0
1
2
RE
SE
T
Outside VLAN
Backup
Router
Internet
78-18003-02